Reputation
381
Top tag
Next privilege 500 Rep.
Access review queues
Badges
2 9
Newest
 Commentator
Impact
~15k people reached

  • 0 posts edited
  • 0 helpful flags
  • 20 votes cast
Jan
23
comment mod_security block requests by http-host header
The question at serverfault.com/questions/658433 contains the answer using nginx, blocking requests based on the Host header.
Jan
23
comment mod_security block requests by http-host header
viewdns.info/research/…
Jan
22
comment mod_security block requests by http-host header
Try to dig a.tracker.thepiratebay.org from any DNS server in this list public-dns.tk/nameserver/cn.html and on each request there is a different answer. Same for tracker.thepiratebay.org which also appeared in our Host: headers. There is a post about it on viewdns.info/research/… with some additional sites. Trying to reverse some of the returned addresses using viewdns.info/reverseip shows that its pretty much random.
Jan
21
comment mod_security block requests by http-host header
There is an extension for sharing trackers described here bittorrent.org/beps/bep_0028.html. But you are correct in that the 'Host:' header for all of these requests is a.tracker.thepiratebay.org or tracker.thepiratebay.org which might be or not be the actual target of these clients. It can also be fake clients just masking themselves as Chinese bittorents :)
Oct
11
comment Ubuntu Upstart script hangs on start and stop
and you can add -n to sudo so it exits with an error instead of waiting for password.
Sep
13
comment ntpd on Ubuntu fails to sync with status 2040
How about tracing the source with something like sudo strace -e trace=network ntpd -n, also what is your grep ^server /etc/ntp.conf
May
31
comment How to escape or remove double quotes in rsyslog template
similar question: mail-archive.com/rsyslog@lists.adiscon.com/msg01707.html
Apr
6
comment Unable to grep sourced Files in Vim
No, the % gets substituded with the file name vim is editing.
Oct
31
comment How do I add a “é” to my url
Hallo Admins, Look at your link, now back to mine, now back at your link, now back to mine, sadly your link isn't mine, but if your link stopped using french wikipedia it could pretend that it was mine. look down, back up. where are you? you are on wikipedia, with the accented é your e could look like. whats that in your hand, back at me, I have it, its a page with two links to that thing you love, now look again, the links are now diamonds. everything is possible when your page looks like serverfault and not wikipedia. I'm on apache.